March 23, 2026CVE-2025-14375 affects the Wp Rss Aggregator plugin (up to 5.0.10) with a medium severity (CVSS 6.1) cross-site scripting vulnerability. Update…
March 23, 2026CVE-2025-14853 affects the Last Email Address Validator plugin for WordPress (versions
March 23, 2026CVE-2026-1004 affects the Essential Addons for Elementor Lite plugin (up to v6.5.5), allowing unauthenticated access to sensitive WooCommerce product info.…
March 23, 2026CVE-2025-14757 affects the Cost Calculator Builder plugin for WordPress (up to version 3.6.9) with a CVSS score of 5.3. It…
March 23, 2026CVE-2026-24591 affects the Turn Yoast SEO FAQ Block to Accordion plugin (up to v1.0.6) with a medium severity CVSS score…
March 23, 2026CVE-2026-24599 affects Woo Thank You Page Nextmove Lite plugin versions up to 2.23.0, allowing remote code execution due to insecure…
March 23, 2026CVE-2025-68884 affects the Wp Simple Redirect plugin (up to version 1.1) with a medium severity CVSS score of 6.1. Unauthenticated…
March 23, 2026CVE-2025-68896 affects the WDV One Page Docs plugin for WordPress (up to 1.2.4) with a medium severity (CVSS 5.3) vulnerability.…
March 23, 2026CVE-2026-24596 affects the Related Posts Thumbnails plugin for WordPress versions up to 4.3.2, with a CVSS score of 4.3. Users…
March 23, 2026CVE-2026-24595 affects the Zoho CRM Forms plugin (up to 1.8.1.7) with a medium severity (CVSS 4.3) flaw allowing unauthorized actions…
March 23, 2026CVE-2026-1003 affects the Getgenie plugin (up to v4.3.0), allowing authenticated users to delete posts due to an authentication bypass. Upgrade…
March 23, 2026CVE-2026-22335 affects the WooCommerce Frontend Manager – Ultimate plugin (up to v6.7.7) with a medium severity (CVSS 6.5) SQL injection…
March 23, 2026CVE-2025-13859 affects the AffiliateX plugin for WordPress (versions 1.0.0 to 1.3.9.3) with a medium severity CVSS score of 6.4. Update…
March 23, 2026CVE-2026-0913 affects the User Submitted Posts plugin for WordPress, with a CVSS score of 6.4. Authenticated attackers can exploit this…
March 23, 2026CVE-2025-12641 affects Awesome Support plugin versions up to 6.3.6, allowing unauthenticated users to demote admins due to an authentication bypass.…
March 23, 2026CVE-2026-24361 affects the LearnPress Course Review plugin (up to v4.1.9) with a medium severity (CVSS 6.4) stored XSS vulnerability. Users…
March 23, 2026CVE-2026-22334 affects the Woo Book Price plugin (up to version 1.3) with a medium severity CVSS score of 6.5. Authenticated…
March 23, 2026CVE-2025-69102 affects the Wp Test Email plugin (up to v1.1.7) with a medium severity CVSS score of 6.1 due to…
March 23, 2026CVE-2026-24388 affects the WPMasterToolKit plugin (up to v2.14.0), allowing authenticated users to perform unauthorized actions. Update to v2.14.1 to mitigate…
March 23, 2026CVE-2026-24598 affects the Multilanguage plugin for WordPress (up to version 1.5.2) with a medium severity CVSS score of 4.3. Patching…
